GCVE - cpe:2.3:a:gopivotal:grails-resources:1.0.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gopivotal:grails-resources:1.0.2:*:*:*:*:*:*:*

part: a version: 1.0.2 update: *

Vendor	Gopivotal (`6e38e249-46be-5e85-86d2-53963774db6b`)
Product	Grails Resources (`42427347-d322-5a6f-9e4d-a54b49568157`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/grails-plugins/grails-resources`	purl2cpe	2026-06-01 10:13:14.383970

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-2858`	vulnerable	2026-06-08 05:05:30.092548	Details available Directory traversal vulnerability in the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 through 2.3.6 allows remote attackers to obtain sensitive information via unspecified vectors related to a "configured block." NOTE: this issue was SPLIT from CVE-2014-0053 per ADT2 due to different vulnerability types. Published: 2014-04-15T18:00:00.000Z Updated: 2024-08-06T10:28:46.371Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/531281/100/0/threaded http://www.gopivotal.com/security/cve-2014-0053 http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0267.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2857`	vulnerable	2026-06-08 05:05:30.073804	Details available The default configuration of the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 through 2.3.6 does not properly restrict access to files in the META-INF directory, which allows remote attackers to obtain sensitive information via a direct request. NOTE: this issue was SPLIT from CVE-2014-0053 due to different researchers per ADT5. Published: 2014-04-15T18:00:00.000Z Updated: 2024-08-06T10:28:46.187Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/531281/100/0/threaded http://www.gopivotal.com/security/cve-2014-0053 http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0267.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0053`	vulnerable	2026-06-08 05:05:10.986461	Details available The default configuration of the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 before 2.3.6 does not properly restrict access to files in the WEB-INF directory, which allows remote attackers to obtain sensitive information via a direct request. NOTE: this identifier has been SPLIT due to different researchers and different vulnerability types. See CVE-2014-2857 for the META-INF variant and CVE-2014-2858 for the directory traversal. Published: 2014-04-15T18:00:00.000Z Updated: 2024-08-06T09:05:38.568Z Open on db.gcve.eu Reference links http://secunia.com/advisories/56841 https://exchange.xforce.ibmcloud.com/vulnerabilities/91270 http://www.securityfocus.com/archive/1/531281/100/0/threaded http://www.securityfocus.com/bid/65678 http://www.gopivotal.com/security/cve-2014-0053	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.